Developing an open source license compliance project : our trials, tribulations and achievements

" summary

An open-source project was built to provide clear, engineer- and lawyer-friendly license compliance reports by ingesting unstructured inputs (zip archives, GitHub/GitLab, dependency lists, links) while preserving corporate confidentiality for SaaS and on‑premise use. The team evaluated existing tools (OSS Review Toolkit, licensee, ScanCode), ran a first PoC, then developed a new PoC using machine learning to reduce false negatives and improve practical accuracy, and will release the code under AGPL v3 while describing CI/CD integration and soliciting contributions.

AI-written summary · about

" related talks

• 25mOpen Source ComplianceCatharina Maracke · Akademy 2020
• 26mThe FOSSology Project – Open Source Software for Open Source License ComplianceAnupam Ghosh · KubeCon + CloudNativeCon + Open Source Summit China 2019
• 50mRunning a Successful Open Source ProjectWayne Beaton, Gunnar Wagenknecht · Devoxx US 2017
• 25mEnsuring OSS License Compliance the Easy WayTony Aiuto · Open Source Summit + Embedded Linux Conference + OSPOCon 2021
• 26mThe FOSSology Project – Open Source Software for Open Source License ComplianceAnupam Ghosh · KubeCon + CloudNativeCon China 2019
• 13mBuild license management into your pipelinesFloor Drees · FOSS Backstage 2023
• 01h 38mOpen Source Licensing: Types, Strategies and ComplianceJeff Luszcz · All Things Open 2020
• 32mAutomating Open-Source License CompliancePetteri Kivimaki · FOSS Backstage 2024